Regarding EDIT2: In the version 2.9.0, I've made the permission for oauth.summarizerrrr.com optional. It's not required by default — the extension will only request it when you activate Cloud Sync for the first time.

This is a Cloudflare Worker serving as an OAuth2 proxy for Google Drive sync. It only handles authentication and does not store any user data. If you don't use Cloud Sync, you don't need to grant this permission at all.

---

Thank you so much for this incredibly detailed and valuable feedback.

I spent today investigating this issue thoroughly. To give you some context, the broad permission was originally implemented to support the FAB (Floating Action Button) injection on mobile browsers and desktop browsers that lack native Side Panel support (like Arc, Dia, etc.).

However, your review pushed me to find a better solution. I have now refactored the code to separate the logic for Firefox and Chromium-based browsers.

In the upcoming Version 2.5: The extension will no longer require "Access data for all websites" by default.

It will only request specific permissions for core supported platforms (YouTube, Udemy, Coursera, Wikipedia, Reddit).

Access to other websites will be strictly optional, only activated if you explicitly choose to use the tool on those specific pages.

I hope this update restores your trust in Summarizerrrr. Thanks again for helping me make this extension better!

----

Version 2.5.0 is now live, to ensure the new permission settings take effect cleanly, I recommend uninstalling and reinstalling the extension.